$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/88AD7F909BC8A6424A8D0CAA6E65F5596CCDF3F1529458222531D693A1AB37C3/0/A9E97BDBD1E0167AF78DA61D1CC845205CD2D26B.mft File: A9E97BDBD1E0167AF78DA61D1CC845205CD2D26B.mft (raw, json) Hash identifier: xLHJ7lxA1jynO9YLvt3Oo0jW5JEUb7GoojyqrmIJ0VA= Subject key identifier: 16:EB:5B:73:FF:65:24:37:46:0F:46:0D:37:A0:99:08:A0:AD:37:8F Authority key identifier: A9:E9:7B:DB:D1:E0:16:7A:F7:8D:A6:1D:1C:C8:45:20:5C:D2:D2:6B Certificate issuer: /CN=A9E97BDBD1E0167AF78DA61D1CC845205CD2D26B Certificate serial: 35A595F359C946EA46D2DEE6481E7ED0C5007F41 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9E97BDBD1E0167AF78DA61D1CC845205CD2D26B.cer Subject info access: rsync://repository.lacnic.net/rpki/lacnic/88AD7F909BC8A6424A8D0CAA6E65F5596CCDF3F1529458222531D693A1AB37C3/0/A9E97BDBD1E0167AF78DA61D1CC845205CD2D26B.mft Manifest number: 01D7 Signing time: Thu 17 Sep 2026 09:32:52 +0000 Manifest this update: Thu 17 Sep 2026 09:27:52 +0000 Manifest next update: Mon 21 Sep 2026 23:30:52 +0000 Files and hashes: 1: 34352e3137392e36302e302f32342d3234203d3e20323637393033.roa (hash: AtRNSUuz30KJA420UIT4dXNIP5KP/QTZd+vXvv71vQw=) 2: 34352e3137392e35342e302f32332d3233203d3e20323637393033.roa (hash: Ngot0XZFyGIjhBrpKzQX/zsaqQZoo+xxOrB8SavgagM=) 3: A9E97BDBD1E0167AF78DA61D1CC845205CD2D26B.crl (hash: Sv2AUgSyRoeYClGYr70Cg/XmhZj+9guVh44LfTrQ02M=) Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/88AD7F909BC8A6424A8D0CAA6E65F5596CCDF3F1529458222531D693A1AB37C3/0/A9E97BDBD1E0167AF78DA61D1CC845205CD2D26B.crl rsync://repository.lacnic.net/rpki/lacnic/88AD7F909BC8A6424A8D0CAA6E65F5596CCDF3F1529458222531D693A1AB37C3/0/A9E97BDBD1E0167AF78DA61D1CC845205CD2D26B.mft rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9E97BDBD1E0167AF78DA61D1CC845205CD2D26B.cer rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 21 Sep 2026 23:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:a5:95:f3:59:c9:46:ea:46:d2:de:e6:48:1e:7e:d0:c5:00:7f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9E97BDBD1E0167AF78DA61D1CC845205CD2D26B Validity Not Before: Sep 17 09:27:52 2026 GMT Not After : Sep 21 23:30:52 2026 GMT Subject: CN=16EB5B73FF652437460F460D37A09908A0AD378F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cd:dd:7a:b0:2e:55:41:9e:cf:7d:05:d5:15: 71:66:37:c5:c5:a6:1e:75:61:b3:b2:c7:73:05:65: 04:9c:af:89:eb:71:c6:4f:9c:d9:78:3d:87:19:1b: 6d:f4:28:7e:56:9b:27:70:0b:e7:af:01:58:d1:b9: e9:10:37:2a:b4:0e:bc:13:e4:6b:64:8f:29:31:8c: 16:87:c4:52:0f:06:ef:84:a1:58:87:3e:d2:35:ac: 12:9e:2d:09:f8:c7:fb:45:ba:be:4e:ed:51:a8:2a: a1:65:04:e9:75:25:d7:63:78:d5:77:e4:fc:0f:5a: 10:f1:74:0f:ad:d8:13:72:f4:6a:c1:cc:cc:eb:0c: fd:56:09:5c:fa:71:28:33:71:b4:0c:94:47:cd:4c: 73:13:d8:0b:c0:b7:f8:87:85:1d:81:70:14:98:fc: bb:04:bb:6b:f9:29:24:7a:ef:0d:53:a5:b7:ac:62: ed:3f:12:79:37:8c:1e:31:52:20:b4:bb:2b:32:01: b4:bc:7f:5f:80:26:d5:29:86:e7:6a:20:6e:a7:7c: 46:a4:3a:2c:91:f5:61:ac:03:d3:c0:e8:31:09:55: a7:24:48:32:9a:60:67:86:91:ee:0b:31:f5:73:3a: 22:38:4a:c8:42:92:2b:13:fd:21:2c:98:0a:1f:5a: 39:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EB:5B:73:FF:65:24:37:46:0F:46:0D:37:A0:99:08:A0:AD:37:8F X509v3 Authority Key Identifier: keyid:A9:E9:7B:DB:D1:E0:16:7A:F7:8D:A6:1D:1C:C8:45:20:5C:D2:D2:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/88AD7F909BC8A6424A8D0CAA6E65F5596CCDF3F1529458222531D693A1AB37C3/0/A9E97BDBD1E0167AF78DA61D1CC845205CD2D26B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9E97BDBD1E0167AF78DA61D1CC845205CD2D26B.cer Subject Information Access: Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88AD7F909BC8A6424A8D0CAA6E65F5596CCDF3F1529458222531D693A1AB37C3/0/A9E97BDBD1E0167AF78DA61D1CC845205CD2D26B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:28:cb:5e:57:a4:99:26:f9:9c:bf:ca:2b:47:0b:19:7a:82: 31:97:e0:ff:85:bd:55:00:72:f8:53:36:48:30:c2:c7:a3:6a: e6:50:59:86:21:bc:72:5f:c8:f4:64:dd:ab:09:0b:f9:9d:8a: 68:a5:14:f2:b7:bc:46:e5:9e:fc:96:e6:c2:82:31:66:6e:f8: 87:47:93:fd:19:92:5b:b4:30:41:02:05:b4:3d:27:ab:9b:4c: 2c:3a:ca:14:28:b6:c4:83:a8:49:59:d7:80:02:90:4d:06:85: d9:b5:b8:c6:8f:98:2e:aa:78:39:49:d2:fd:d1:7b:14:62:24: 1a:8c:80:08:86:63:d9:19:02:08:b2:19:d4:6d:2c:d4:a0:52: 79:23:19:93:5a:69:00:c4:06:3e:da:0d:a3:2a:87:c7:b2:a3: a1:e5:fd:d9:b1:1c:98:3b:12:e5:ae:4f:1d:68:f1:7c:fe:ab: e8:d4:fd:57:e9:96:09:41:fb:67:ec:21:5c:ca:c8:2b:68:af: 48:57:f1:5a:d1:a3:70:5c:14:b0:c6:93:5e:b6:c6:be:24:99: 83:96:7a:6f:23:51:70:29:ce:d5:30:07:03:8e:42:b4:1a:cf: fa:a6:6b:a6:05:3b:f8:0c:47:8d:bb:a6:c3:57:0f:dd:0d:ea: f5:35:36:51 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgIUNaWV81nJRupG0t7mSB5+0MUAf0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFOTdCREJEMUUwMTY3QUY3OERBNjFEMUNDODQ1MjA1 Q0QyRDI2QjAeFw0yNjA5MTcwOTI3NTJaFw0yNjA5MjEyMzMwNTJaMDMxMTAvBgNV BAMTKDE2RUI1QjczRkY2NTI0Mzc0NjBGNDYwRDM3QTA5OTA4QTBBRDM3OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCczd16sC5VQZ7PfQXVFXFmN8XF ph51YbOyx3MFZQScr4nrccZPnNl4PYcZG230KH5WmydwC+evAVjRuekQNyq0DrwT 5GtkjykxjBaHxFIPBu+EoViHPtI1rBKeLQn4x/tFur5O7VGoKqFlBOl1JddjeNV3 5PwPWhDxdA+t2BNy9GrBzMzrDP1WCVz6cSgzcbQMlEfNTHMT2AvAt/iHhR2BcBSY /LsEu2v5KSR67w1TpbesYu0/Enk3jB4xUiC0uysyAbS8f1+AJtUphudqIG6nfEak OiyR9WGsA9PA6DEJVackSDKaYGeGke4LMfVzOiI4SshCkisT/SEsmAofWjm9AgMB AAGjggLTMIICzzAdBgNVHQ4EFgQUFutbc/9lJDdGD0YNN6CZCKCtN48wHwYDVR0j BBgwFoAUqel729HgFnr3jaYdHMhFIFzS0mswDgYDVR0PAQH/BAQDAgeAMIGwBgNV HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l dC9ycGtpL2xhY25pYy84OEFEN0Y5MDlCQzhBNjQyNEE4RDBDQUE2RTY1RjU1OTZD Q0RGM0YxNTI5NDU4MjIyNTMxRDY5M0ExQUIzN0MzLzAvQTlFOTdCREJEMUUwMTY3 QUY3OERBNjFEMUNDODQ1MjA1Q0QyRDI2Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2 RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BOUU5N0JEQkQxRTAxNjdBRjc4 REE2MUQxQ0M4NDUyMDVDRDJEMjZCLmNlcjCBuQYIKwYBBQUHAQsEgawwgakwgaYG CCsGAQUFBzALhoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s YWNuaWMvODhBRDdGOTA5QkM4QTY0MjRBOEQwQ0FBNkU2NUY1NTk2Q0NERjNGMTUy OTQ1ODIyMjUzMUQ2OTNBMUFCMzdDMy8wL0E5RTk3QkRCRDFFMDE2N0FGNzhEQTYx RDFDQzg0NTIwNUNEMkQyNkIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB /wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA3KMteV6SZJvmcv8orRwsZeoIx l+D/hb1VAHL4UzZIMMLHo2rmUFmGIbxyX8j0ZN2rCQv5nYpopRTyt7xG5Z78lubC gjFmbviHR5P9GZJbtDBBAgW0PSerm0wsOsoUKLbEg6hJWdeAApBNBoXZtbjGj5gu qng5SdL90XsUYiQajIAIhmPZGQIIshnUbSzUoFJ5IxmTWmkAxAY+2g2jKofHsqOh 5f3ZsRyYOxLlrk8daPF8/qvo1P1X6ZYJQftn7CFcysgraK9IV/Fa0aNwXBSwxpNe tsa+JJmDlnpvI1FwKc7VMAcDjkK0Gs/6pmumBTv4DEeNu6bDVw/dDer1NTZR -----END CERTIFICATE-----Generated at Fri Sep 18 07:46:21 2026 by rpki-client